52765666065006fde14ae1c3454fdb47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52765666065006fde14ae1c3454fdb47_JaffaCakes118
Size

1.2MB
MD5

52765666065006fde14ae1c3454fdb47
SHA1

21848d8df82db674fade5c7f604c96577d7f85dd
SHA256

9aa009524f467d176a807e918a4205d6e8abc9db202795995315b2e541b6a6ad
SHA512

e3c964c25a4aefcd4148e381e433e1b523474f45de71bb3cef0961ad84e6af657b52a7bc78a58834a1cc06ccb378a33af10e483f4f2e2f82b07137b9b2dbd956
SSDEEP

12288:qKuVN/VPzHy80SrBMdWdCq4WQK6Ljzl8OjaCKOiRd0FcSM:qVn5zPdBZn4Rjzl8OjayiRdwZM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52765666065006fde14ae1c3454fdb47_JaffaCakes118

Files

52765666065006fde14ae1c3454fdb47_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 90.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shader
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.version
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BINKCONS
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ